[cristian20042]

This is very bad, some cunt decided to give himself admin with admins_simple.

He seems to have access to admins_simple. I think it is a dead exploit coming back to life...
https://forums.alliedmods.net/showthread.php?t=304847

Other person had the same issue, but somehow, this dude managed to access the database as well, and I only hope that it's just a code that changed the sourcebans password.

I am telling you, there is no possible way for him to have FTP access, all actions are logged and didn't seem like he accessed ftp. What I think is that he made a plugin which modified a sourcebans account email, then reset the password.

Also, I only have my own plugins, there is no way there will be a backdoor, just so you know.

[Franc1sco]

You have sv_allowupload and sv_allowdownload to 0? You need to have it to 0. Just use a fastdl.

Also exists a exploit for maps in tf2, not sure if in csgo is fixed, more info https://forums.alliedmods.net/showthread.php?t=318094

[Mitchell]

Did you follow the suggested fix that's in the the thread that you posted?

[cristian20042]

Originally Posted by Franc1sco You have sv_allowupload and sv_allowdownload to 0? You need to have it to 0. Just use a fastdl. Also exists a exploit for maps in tf2, not sure if in csgo is fixed, more info https://forums.alliedmods.net/showthread.php?t=318094

sv_allowdownload is set to 1, do I need it in FastDL?

nvm, put it to 0 and yes, i've made a plugin which blocks uploads

[cristian20042]

It's the old exploit and valve didn't fix it =))

I had to set sv_allowdownload 0.

Solved.

[Mitchell]

Originally Posted by cristian20042 It's the old exploit and valve didn't fix it =)) I had to set sv_allowdownload 0. Solved.

Well not solved if you used that only.
You should set sv_allowupload 0 also so they cant upload plugins to your server.

[RealEdan]

How does this even work? Isn't allowdownload only linked to the FastDL Server? How are people downloading server files..?

[sneaK]

Originally Posted by RealEdan How does this even work? Isn't allowdownload only linked to the FastDL Server? How are people downloading server files..?

No, sv_allowdownload is only for downloading directly from server, not from fastdl.

[cristian20042]

Mitchell, allowupload was on 0 already, i've also made a plugin to block uploads just in case. Both vars are set to 0.

[RealEdan]

Originally Posted by sneaK No, sv_allowdownload is only for downloading directly from server, not from fastdl.

What exact files can you download through it?